Kalya Subramanian

[containerD](https://kubernetes.io/docs/setup/production-environment/container-runtimes/#containerd) [Docker](https://kubernetes.io/docs/setup/production-environment/container-runtimes/#docker)

[Example HostProcess CNI Deployment](https://github.com/kubernetes-sigs/sig-windows-tools/blob/master/hostprocess/flannel/flanneld/flannel-overlay.yml)

[L4WfpProxyPolicy](https://github.com/erfrimod/hcsshim/blob/master/hcn/hcnpolicy.go#L165) [containerD](https://kubernetes.io/docs/setup/production-environment/container-runtimes/#containerd) [HostProcess](https://kubernetes.io/docs/tasks/configure-pod-container/create-hostprocess-pod/)

[Reference CNI plugin](https://github.com/containernetworking/cni#reference-plugins)

Per @jsturtevant, the flow is `kubectl apply > webhook (mutating or validating) -> kubelet -> containerd -> cni` so webhook annotations are applied before the CNI runs. Still need to...

[Example API call from CNI plugin](https://github.com/projectcalico/calico/blob/master/cni-plugin/pkg/k8s/k8s.go) (back up plan) Needs to be determined if containerD already gets OSM annotations (ideal solution)

[HostProcess](https://kubernetes.io/docs/tasks/configure-pod-container/create-hostprocess-pod/)

@benmoss Can you share .\winsw\join.ps1?

Hi folks, I've been looking into this myself with Prometheus + Istio following [these docs](https://istio.io/latest/docs/ops/integrations/prometheus/#tls-settings). The user experience is pretty painful as it is and the documentation can be a...